Azure Authorization (RBAC)
Azure Authorization (RBAC) management API — 40 operations consolidated from 9 Microsoft OpenAPI specs into one connector.
- Base URL:
https://management.azure.com - Auth: OAuth 2.0 (user-delegated) — attach an InTouch
oauthcredential. The server refreshes the access token before each run.
Consolidated from 9 spec-per-resource-provider connectors; every operation from every one of them is preserved. The superseded names still resolve.
Operations
authorization_provideroperationscalls_provideroperationsmetadata_get— GET /providers/Microsoft.Authorization/providerOperations/{resourceProviderNamespace}authorization_provideroperationscalls_provideroperationsmetadata_list— GET /providers/Microsoft.Authorization/providerOperationsauthorization_racalls_roleassignments_list— GET /subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignmentsauthorization_racalls_roleassignments_listforresourcegroup— GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/roleAssignmentsauthorization_roleassignmentscalls_roleassignments_get— GET /{scope}/providers/Microsoft.Authorization/roleAssignments/{roleAssignmentName}authorization_roleassignmentscalls_roleassignments_getbyid— GET /{roleId}authorization_roleassignmentscalls_roleassignments_list— GET /subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignmentsauthorization_roleassignmentscalls_roleassignments_listforresource— GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/roleAssignmentsauthorization_roleassignmentscalls_roleassignments_listforresourcegroup— GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/roleAssignmentsauthorization_roleassignmentscalls_roleassignments_listforscope— GET /{scope}/providers/Microsoft.Authorization/roleAssignmentsauthorization_rolebasedcalls_permissions_listforresource— GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/permissionsauthorization_rolebasedcalls_permissions_listforresourcegroup— GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Authorization/permissionsauthorization_rolebasedcalls_provideroperationsmetadata_get— GET /providers/Microsoft.Authorization/providerOperations/{resourceProviderNamespace}authorization_rolebasedcalls_provideroperationsmetadata_list— GET /providers/Microsoft.Authorization/providerOperationsauthorization_rolebasedcalls_roleassignments_list— GET /subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignmentsauthorization_rolebasedcalls_roleassignments_listforresourcegroup— GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/roleAssignmentsauthorization_roledefinitionscalls_permissions_listforresource— GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/permissionsauthorization_roledefinitionscalls_permissions_listforresourcegroup— GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Authorization/permissionsclassicadministrators_list— GET /subscriptions/{subscriptionId}/providers/Microsoft.Authorization/classicAdministratorsdenyassignments_get— GET /{scope}/providers/Microsoft.Authorization/denyAssignments/{denyAssignmentId}denyassignments_getbyid— GET /{denyAssignmentId}denyassignments_list— GET /subscriptions/{subscriptionId}/providers/Microsoft.Authorization/denyAssignmentsdenyassignments_listforresource— GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/denyAssignmentsdenyassignments_listforresourcegroup— GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/denyAssignmentsdenyassignments_listforscope— GET /{scope}/providers/Microsoft.Authorization/denyAssignmentsglobaladministrator_elevateaccess— POST /providers/Microsoft.Authorization/elevateAccesspermissions_listforresource— GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/permissionspermissions_listforresourcegroup— GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Authorization/permissionsprovideroperationsmetadata_get— GET /providers/Microsoft.Authorization/providerOperations/{resourceProviderNamespace}provideroperationsmetadata_list— GET /providers/Microsoft.Authorization/providerOperationsroleassignments_get— GET /{scope}/providers/Microsoft.Authorization/roleAssignments/{roleAssignmentName}roleassignments_getbyid— GET /{roleAssignmentId}roleassignments_list— GET /subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignmentsroleassignments_listforresource— GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/roleAssignmentsroleassignments_listforresourcegroup— GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/roleAssignmentsroleassignments_listforscope— GET /{scope}/providers/Microsoft.Authorization/roleAssignmentsroledefinitions_createorupdate— PUT /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId}roledefinitions_delete— DELETE /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId}roledefinitions_get— GET /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId}roledefinitions_list— GET /{scope}/providers/Microsoft.Authorization/roleDefinitions
Inputs
- a linked
oauthcredential (no key inputs) operation— one of the operations above- path parameters when an operation's path contains
{...} query— optional JSON object of query paramsbody— JSON object for create/update ops
Publishes
The keys a later task may reference as {{taskName.key}}. Referencing anything not listed here resolves to nothing at run time.
erroroperationresultstatus
Input Properties
Every property this tool accepts, from its own tool.iml.
| Property | Type | Required | Default | Description |
|---|---|---|---|---|
operation |
string | yes | — | One of: authorization_provideroperationscalls_provideroperationsmetadata_get, authorization_provideroperationscalls_provideroperationsmetadata_list, authorization_racalls_roleassignments_list, authorization_racalls_roleassignments_listforresourcegroup, authorization_roleassignmentscalls_roleassignments_get, authorization_roleassignmentscalls_roleassignments_getbyid, authorization_roleassignmentscalls_roleassignments_list, authorization_roleassignmentscalls_roleassignments_listforresource, authorization_roleassignmentscalls_roleassignments_listforresourcegroup, authorization_roleassignmentscalls_roleassignments_listforscope, authorization_rolebasedcalls_permissions_listforresource, authorization_rolebasedcalls_permissions_listforresourcegroup, authorization_rolebasedcalls_provideroperationsmetadata_get, authorization_rolebasedcalls_provideroperationsmetadata_list, authorization_rolebasedcalls_roleassignments_list, authorization_rolebasedcalls_roleassignments_listforresourcegroup, authorization_roledefinitionscalls_permissions_listforresource, authorization_roledefinitionscalls_permissions_listforresourcegroup, classicadministrators_list, denyassignments_get, denyassignments_getbyid, denyassignments_list, denyassignments_listforresource, denyassignments_listforresourcegroup, denyassignments_listforscope, globaladministrator_elevateaccess, permissions_listforresource, permissions_listforresourcegroup, provideroperationsmetadata_get, provideroperationsmetadata_list, roleassignments_get, roleassignments_getbyid, roleassignments_list, roleassignments_listforresource, roleassignments_listforresourcegroup, roleassignments_listforscope, roledefinitions_createorupdate, roledefinitions_delete, roledefinitions_get, roledefinitions_list |
denyAssignmentId |
string | no | — | Path parameter denyAssignmentId (required by some operations). |
parentResourcePath |
string | no | — | Path parameter parentResourcePath (required by some operations). |
resourceGroupName |
string | no | — | Path parameter resourceGroupName (required by some operations). |
resourceName |
string | no | — | Path parameter resourceName (required by some operations). |
resourceProviderNamespace |
string | no | — | Path parameter resourceProviderNamespace (required by some operations). |
resourceType |
string | no | — | Path parameter resourceType (required by some operations). |
roleAssignmentId |
string | no | — | Path parameter roleAssignmentId (required by some operations). |
roleAssignmentName |
string | no | — | Path parameter roleAssignmentName (required by some operations). |
roleDefinitionId |
string | no | — | Path parameter roleDefinitionId (required by some operations). |
roleId |
string | no | — | Path parameter roleId (required by some operations). |
subscriptionId |
string | no | — | Path parameter subscriptionId (required by some operations). |
query |
string | no | — | Optional query params as a JSON object string, e.g. {"limit": 10}. |
body |
string | no | — | Request body as a JSON object string. Sent as JSON, or form-encoded when the operation expects a form. Required by write operations. |